Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa
File: d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa (raw, json)
Hash identifier: Z03V47uUUZWS2LfPWT1QJeet0hOM8NpbJYn5ttIxnNA=
Subject key identifier: 0F:C9:65:0F:58:87:89:E5:64:0E:68:AF:A9:35:81:18:D3:16:37:8F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486D905697092B27E047636780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 199.16.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:56:97:09:2b:27:e0:47:63:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=bf95f9b6-49e5-4dd1-a698-affc4db38116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:c6:45:56:3f:af:00:56:cc:48:ae:5d:e6:
e3:ed:ea:6c:28:5c:db:58:f0:89:40:a3:1d:09:5e:
4c:82:8c:a2:f4:ad:9e:64:a9:8e:af:67:e8:17:81:
5c:7c:71:d8:f0:ef:4b:b0:35:3b:19:fc:bc:09:2b:
eb:9e:3d:30:97:59:a2:9c:94:4b:22:4f:6a:47:d2:
3f:df:6f:36:b9:f6:9a:59:12:1e:4b:ac:38:12:f3:
b0:94:6c:ab:3f:f0:e4:d3:91:b9:da:37:e3:c7:1b:
a0:56:22:bc:a2:9f:97:cd:a0:85:c0:09:6d:fb:c9:
6d:a8:70:03:38:dd:72:72:d4:8b:16:00:07:5a:59:
1b:46:97:d7:a4:2b:bf:ee:ba:71:ae:49:02:64:04:
f1:fd:bc:49:dd:99:1c:79:d5:06:93:50:c9:ad:6c:
82:1b:62:c8:c9:e3:e8:e9:88:d6:42:51:9e:64:44:
03:53:b4:be:19:5b:d3:c1:ff:c9:1d:3e:5b:e7:f1:
bf:a6:7c:eb:40:51:bc:2d:d6:85:4c:30:a0:c9:06:
62:5d:47:49:1c:03:4a:2a:f3:40:3a:d4:98:ee:01:
0b:fe:61:86:0b:c2:45:fe:40:6d:cc:55:14:43:3a:
19:57:72:92:02:bb:45:7d:a8:00:37:2b:f0:7e:b0:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:65:0F:58:87:89:E5:64:0E:68:AF:A9:35:81:18:D3:16:37:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:39:91:33:b2:fb:62:5b:c9:48:a4:6e:39:83:8b:bf:43:58:
32:af:9d:1c:81:13:0a:b3:2c:4c:ab:81:67:ed:1e:e6:a2:21:
8d:01:33:54:7a:b4:4a:5a:e4:a9:5f:9f:88:95:3a:4e:19:47:
35:7e:36:e6:c1:1c:ff:27:f4:a3:39:ca:81:54:fe:31:dc:4f:
dc:8c:2b:f0:fa:97:d7:93:7e:d0:92:66:3f:64:10:14:47:1d:
e7:67:21:95:79:6f:a1:4e:a4:76:40:65:bf:14:f4:e0:64:62:
3a:86:77:69:8b:bd:04:68:39:38:4d:86:c7:15:54:6b:10:70:
d5:3d:e1:c3:58:4f:da:91:8e:2f:fe:b4:aa:ba:d3:6b:6a:0d:
7f:8d:b0:c3:62:2b:60:05:0a:bc:52:71:cd:84:33:f5:0d:63:
53:4c:d8:bf:52:92:56:dd:5f:58:bf:c4:86:c7:68:de:81:60:
62:61:65:0c:e9:b1:69:bb:b5:8c:74:28:8b:b8:e5:b9:83:d0:
4a:e0:49:a1:d0:53:07:d6:cc:17:6f:6d:80:b3:26:8b:31:98:
ad:cc:62:3f:40:75:0f:d9:d9:38:53:eb:5a:67:23:c6:0e:12:
ae:9d:3f:c4:06:6a:2c:fa:20:c1:5a:79:36:f6:7c:97:98:a4:
6d:b0:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:11 2025 by rpki-client